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[bbbb©bb] 

BEB©BB£ya«IWtfB#*nfc«£s BEB© 

mtmm^®o)ym.fi$micm-3vT. beh >7>7© 
B***Br3«BB*ME«©BBi=iSfl*-*B«# 

Sit, 

BSSB#ia©fSIiEBBfcg-3^T s BEfft©gB©iffi 

Buieig i ©swf^&ic £ »j fifcitufBissiJn $bics 
BEavx>y©§fi£ia:£f+8Jrr£Bi©st 
m®t. 

bess 1 ©ita^©^ y imzntcmmmmmti 
beb 1 of«#«Jc * y tH**ftfc»EBBfH*©B 

IcS^T, BEBE#&©BSE©£3£felBr3C£ 

<h * fit *3 C £ ? 51S$BiaSgS, 

[ff*^2] fflE8E#B©BIiE»*fc*-^Ts B 

bbobb* s g«sia©fii£i«#-f 3m 2 ©bb#b 
t, 

beb 2 ©bb^bk * y nr= BESffifH&©B 
BE«©BB©s«£B*it»T*B2© 

Hfi*B£** SfcB**C£*WB£*-*BBB1 K 
EB©BBBBBB. 

[BMI 3 ] BE&ft#&K£ y BEB©£BlcBfl 

i*ikiimmm»XKi*ikm^s beeis^skj: 
y eb$ nfeBEBMH 16* mmt 3 1 1 * beh 
»*atj:yiHa*nfc«9ES«^»©«*y-b'y hf 

SB ^BSS/t?©** 6 x5 C t *WA£ T 
1 KEB©BB8»BB. 

[B#B4] *y ^^LTfftOgWcaVT 1 

vvfcBBrsBBBBBBwBBBBjfrBfcB^T* 
BEB©BB*ysfliratfB#**ifcB^ beb© 

SE<!:lgliE?-£>fgiiE*x y 7*4\ 
BEBEzyy^WBB-WDBBBBteB^T, BE 

a>T>y©B#*»B*-*BBB*Be«©BBteB 

flrt&BXT 1 *?^ 

BEBEXxyTVDfflBtciSBIIBBfcB^T, B 
Effl©BB©B»JBB*B»*-*B»Xxy 7£s 
BESWfXxy TtofflBfcJ: U flfcBEBMB fl 

©EB*MBr*EB*JBXx y 



5**j«r * c t k * y » BuiBa > y v v©bb&b* 

[BBB5] *y H7— 7£fM.TB©£SlC3>T- 

bcb©bb * y SBBBtfB»*nfc«B, beb© 
sb <h mmt sbex x y » 

lifEBfiEXxy^OjBSlciSKSEISaicS^T', §5 
En >x vy©Bg#£»l$-r5»B8£BEB©gBlJ: 

BEBE*xy ^OttWfPWKSBieSlcS^Tv BE 
B©BB©BBIBB*B»T*B»;ix v 7£» 
BE8H#Xxy ro«Bte«fe y BB$hfeBEBBIBB 
icS^T. BEaVxVyoBfltettSltBrsttB 

BEi+SrXxy 7©5amc J: y tHBtt ftfcBEBMBB 
©BBBMBrtEBMBXr y ft. 
BEttB* x y T^BBteJ; »J IHSSftfeBEBBfcB 
OfiUcS-Sf^Ts BESSEXxy ^OBBTOBBOB 
S*MBr«C£lcJ:y« «Ba>f>y®aflte»* 
MB* *MBXx v r t fc^fcil £ *BB£ □ y tf 
a -* B*B y rTB* 7*n ?5 Z»tfeB$tiTl*«E 
BBtt. 

[B*B6] Bl©*y H7-**rtLTBl©BB 
frS 3 Vx fcgflf SBBBBBBKBl^T* 
BEB1©BBK8LT* aBttRW>E**Bfflr*B 

1 WiXii^lfi.!:, 

BEB 1 <0SBi:l8IE-r5m 1 W12E#IS<!:, 
BESflBlFRl<0B**3aS«Lfct*. BBaVrVyfl) 
B^BBTSamafcs BEBlOBBii'SSBr* 

BEB1 ©»B*>6BffllLfc«B3>xVy*, SI2<D 
^y h7— >*^LTB2©BBfcBfflf *B2©2S« 

MBB2©BB*y»«B^tfB»*ftfc«*. BEB 

2 ©BBtBUfSB 2 (OBfiE^Bts 
BEB2©BB*»©BBBB(c»"5t^Ts BES«# 
«K J: y Bffl*ftfettEBBB*BEB 2®»BteBB 
f«B3(02Sfi#ai, 

BEB20BB#B©BHBBK»"3l>T» BEB 2© 
BB©B8"J««*B»r*Bl ©BB*Bt, 
BEB 1 ©B»#Bte* y US* nfcBEBSJBBlcB 
-3UT> BE3VrV*y<0g«6»*IHW«Bl©lf 

BEB 1 ©tt»*»»c<fe y tH»*tifcBEB8'JB«*E 
ttf«E1S#Si:, 

beb 1 <D%mzmc j: y tH»*tifcWES««»©fl 

BEB2©BB¥B©BB©BB«IHBr 
iicj: y % BE3>7V^©SBBK«MBr*M 
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m&t Sffi*. Z C t Z%®£ T SBBBBBB. 

mzm&mz * y nfcwe=> wwb 
rsf§^b^is<t£;rsi;:<i;is;r r*w* 

JH6tc!BK<*>1i$6«i3£Bo 
[fl*^ 8 ] MiBSS 1 OBBE#«©BHie«tc»^ 
Tv huSBB 1 <0tt«#Wlc J: y ttfk$ tifctttBSflKHft 
BEBl«>BBfcB«**B4©Bffl#afc» 
BEB2©BE#ft<DBEBBfcB-3^T, b5IBS2<D 
gHfr5g«£a©ffi£S»»-r*Sfl2<D«tfi#K£, 
buIB^ 2 <£lKB^Btc£ y DM* nfcBulBSfl^iiOfil 
Kg"3^T\ BIBB2«)£B<>!)Sfl&&«tttt-r*B2 

otH»*«t**6ic«iii*ci*w«tr*i»«fli6 

KEBaftflBBBB. 

[»5R3S9] ffiea[3(D3a£fl#a(cj:ytnBS2(o« 
BfcBBSftfcBEBBBtfBBtfnfcB** buibibh 
#»c j: yeB#tifeBEBSMHiftB£rB£ <tt, 

bb* rsw $b 6 icbbobbbbbb. 

sfr s □ v^vy *sbt*«b»sbb®««»s* 

BEB1©BBU:»LT» S8flWRro!)S**2Hlf«ar 
IflMHlXTy?*, 

MBBl ©BBfcBE*-*B1 OBEXxy 7£» 
BEBflffB<DEB*BBLfc£** MIBu Vf>7<0 

B#*»B-r*»i*8£s BtBBiaBBfr6s«r« 

WBBIOBB^SBBLfcttEaVTVy** £2(0 
*y h-7-**rtLT*2©BB(cafflr5S2(0iifll 

l9E»2©itB«feyBfflWRr<««*tifeBdv buIBH 
2 <D%iWtWmT%% 2 OBIIXx y 7£ s 
WEM 2 ©BIIXx y ^OBBlc £ SBBBBKB^ 
BCSftX x y 7cDSaSlc * y BBtrtifc BUSBAR* 
SifciluifiSg 2 asBKBBr SB 3 OBflXTy 
sutBSS 2 WBIIXx y 7©»Bfc J: SBBBBfcB-3^ 
7\ «BB2©aB©B8J«B*B»r*B»Zy 1 y7 

BEBBXtv 7©fflBU:«fc y BB^ti^BBBBBB 
KB^T, BEa >x vy<DB«fcft*tHgrt-«tt« 

BEBBXrv yffttt&hfcBtBBBIBB 
OBB4BBT 4BBWBX? y 7^ 
BEHBXrv ^©fflBlc«fe »J ftaSttfcMIBSft^Sl 
©BlcB^T* iuSBB 2 OBSEXxy ^OS&ST'OB 
EOBBBMBTBC ME3>tV7©»I 
BB«0Br*«BXxy^4»BfeCfc«BBt« 
BBBS5B. 



[B«Blll Bl©*y h9-**ftLTBl©B 
Sfr 6 =1 *SB*-*«BfflBBBB® 7n 7*5 

iJIB^IOHBlc^LT, BffiBqT0!>B««Bflr«B 
lO&flXxyy-hv 

BulBm 1 WSB^BliEt-^m 1 QBE*?? ft, 
BBBBBB©BB«it«Lfc£*» BEavxW® 

Bg#^<K^-r5»i*a*. BBBiQBB^&9Br% 

BBBlOBfi*f»6B«LftBB3VyV'y*» H2<*> 
*y h'7—>*^LTB20BBfcBfflr*B2©Bfi 

«B3B20BBJ:yBfflIWfl 5 B«*ftfc«*. buIBS! 
2 ©ggiBilfSSif 2 ©BEXt- y 
MISS 2 ©BIIXx y yoSQSici: SBBBBKS-^ 
BBBB*T 1 y7fl>fflBte*ySfl*nfcBIBB» 
BSMiSm 2 eBBtc&ft? SB 3 (DSiXx y 7<b* 
BuiBJg 2 OBEXx y 70»aic«J:*BliEBSfcB-3l'' 
T. BGB2(DBB<DBBBB«BBr%BBX7 : yr 
t, 

BIBBB Xr y ^OBBlcJ: y BB J ft* BufBfffiS'JIf SB 
KB^T, BB3Vx>y©BBBB«IHW*tt« 

MIBf+iSXx y y<0Saatc <fc 'J WB* ftfcBEBBft $6 
OBBBMBfBeBMBXr y 7<b , 
BulBH-aXx y yoDBBtc* y fHS* tifcBESfl&B 
©BltS^Ts hOIBH 2 ©BBXx y ^©fflBT'OB 
KOBBSWBf * E £ y » BI33 >x vy©SB 

ism»mT%%mzT y *b<s c t * mutt* 

[0 00 1] 

IBBOBf «ft«»B] *fg^tis tfSijiaaSMfcJ: 
tf»Bs MmclBiS&ttKMU flic, nvxvyofU 
ffl*WBr*C ttfT* 5<fc 5 »c LfcltBSaBgBJJJ: 
iRWfc BIHCEBBWEBT*. 

[0 00 2] 

[^*cdS«] 5fi*» -TV*-** Hc«B*n**y 

f V*-*y h*^LTBB*BBLfcy» »*t^ 
BBfcSttBofcyrSC 
[0003] 

*if<oBf»©BB*«Br*MB««. ^nicw-r* 

[0 0 0 4] LfrLStf^ -TV5r-*.> hftf©*y 
h7— ?ZmCT. BB^MBIIiftifflWfHfcfl 5 * ^©F^ 
BB/£lt?*<. Bfl*K»-r*Bfi»JBt-3T^ft^ 



(4) 



&FJ2002-84274 



[0005] ttc, *y vrj-' ?sauT*iEfc»B* 

[0 0 0 6] *^iCCD<i:3^tt>Wcig*-TS:*nfc 
[0007] 

BSE#&£, BEE¥a4>8BB«lcft-5^T s =3>xV 

B«*ft»r*Bi<wR»#«£» mi 
astfat-sm 1 wsm#iei> b 1 osta^gicj: y 

tH**ftfcBaHtH*E«T*K«#«£» Biotttt 

flte»«*j»r «Mft?$t& § c t *&®t t 

So 

[ooo8] ^muom 1 ottttnsBBii* be^s 
»f 4« 2 0Bfe *2©u»#sic«j:yw»* 

hfcBft£ft©fflU:B-3t>T\ flomCDHMfttt 
RT SB 2 Off 5 lcBlt« J: 3 fcf 3 £ 4: 

[0009] *«l»a>S 1 <D* BBBBBU: » £<I^ & 

B«¥«teJ:yKtt*ftfc«»ja«*}ll*r*i:£fc 

italic <*: y fH»*ftfcs«^tt©fi* y -t 7 h 

So 

[ooio] ;Mmafti«>ftftfta£S<& n>x> 

WK**hfc«^ «<0*Bi:Bnr*BliExyyr 
<h, BSE:*xy;7VB^T*©BIiBBBfcg-3l.'>T» =i> 

fIXx-v7°<!:. BKZr'>:toffl£fcJ:S8liEBftl::B 
•3VTs fftOBBOBSJflHISWBf «B»Xxv ^ 
.tv »»7f» yroiOSKJ; y BBtfifcHMfflftlcS 

tta*x 7 tvjmgbic * y tmsftfc«aift«©e 
B*Mftr«EBiM»*xy7 , i:. ttttxxvTVHiBi 

J: y tHft*ftfc»lfcK«>ftlc»-3^T» BttXx-y 
^OBBTOBEOJBBCMBr « C t»c* »J » BIB3 



[0011] *8HB©B 1 4>EMfftlcGft£ftTbSB 

rn^^tt* ^y^yy^umtt^mtx^yy 

ts tt©«B«fcyBflfratfB#*ftfc«S. ffiOgB 
tBlitrSBIiEXx BflXxy 7V)SttgT'<7)B 

SEB*fc*^Ts aVx>y<0B»*BBf *BBB 
«60ftft.cB«T*jiHl*x'y7*£, BOXx*?© 
BHfcJ.SBfflftBlcB'^Ts ttOBflOBMttttS 
ft» -fSUrtfXx » 7<L v Biff* x y 7*©»aic <fc y 

if jn/cfssiiiiiSKS^T. □ vr>yo»i6»* 
ttftr*tfttxxy7*£» ttBXxyroBatcjcyw- 

ft* nrc«JgiJ««fl!>Efi*t!Wf SEBWBXt 1 y y 

ttftXxy^OJra(cJ:ytt«*nteSWl^»«)B 
lc8^l>Ts Bffi*x-v7<D»BT©BHaB5*»JB 

Mft*?9 7&«fttrc&*ttft&r«. 

[0012] *8E<DB 1 <Dlf $B5aSgSv B 1 ©ISS 
BBAifc. fc<fctfBl©E»«WcE»*ft7V57*a 
WtKfi^ii, □>xv\yflW9fl;*lv <6<oSB 
*ysflffRrtfB«*nfc«*» ?-©g(i£i ! FpjLT i 6> 

SBfHKtflW«*B*.ftl/rays tt©BB£Btt* 

r*BBBflHl!W)BBKB«*n*. 
[0 0 13] *Rti0ft20ffiftftBttBI& Bl©g 

bk8lt, a«ifRr©B**asflr*ftifl!>B«#ft 

BlOBB£BIiE*-SBl®BE¥ft£. gflffRT 

©B**a«Lfci*, oyryvoBg^zmfoTzm 

BfcB*. BlWBB^SBBrsSB^Bis Bl©£ 
B6 x SS<tLfc:iVx> , J'«\ B2<B*v h9— 
LTB2©&BfciMfirSB2©&fI#K<!:, B2©g 

b J: y BBfRitwsirnfcB^. b 2 ©gsiBar 

Zl&lOVlWZ&t. B20BfE¥ftQBBBB(cS-^ 
UT, BB#ft(cJ:yBBi!rti^BBB«B2fl9ftB(c 
2lfi1-Sm3<DiSfi^K<!:, B2«)BliE#ft0!}BBEBB 
KB^T. B2(0gSOiffiSUtl^ : &IX»f^Bl«)IS 

b 1 ©B»*«K «*; y B»*nfcBWB mz 
m-svzs □>x>7osft^a*tta-r*Bi©tt» 

^IS-hv B1 ©IH*¥«lc*y!W*ftfcftflJftB*e 
Br*BB#«is B1©lt«*BlcJ:yif«*nfcB 
B^»©fiHcB-5t>T. S2roBSE#K©BEco^5^ 
MBr*c tlc«fe y . zi >7 W«)MMHK«miPr« 
#JB#«£*ft«C£*W«i:*-*. 
[0 0 14] *«W0DB2G)1tBSaSBBtt, 3VfV 

*y*a^-r«B##ftt» a^BHcfcyawifca 

[0 0 15] *«W©B2©1fB«fta«Bti, miwB 
ffi*HW>BliEBB(cB-5t^T. B 1 <0tt»* Sic J; y ft 
»*nfcBffltettfl>fl*s Bl©BBJcBfflr*B4© 
iSfi^S.!:, B2<0BIE^8M)BBBSlcB^T, B 
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^T, Sg2©&E©g«&8*£itlJtr3m2©fta# 

[0 0 16] *%w<»%2<Dm®mm : 3ifflt. sg3©& 

fc«S» fBB^Sfcd: y fBB<*ftfeH9JftB*;|if£rs 

i:<ttic, si©im*«ic«fcyim*ftfcS{BtHS© 

5Ci:^T'$5o 

[0 0 17] M«Qft2®mUAB£BI*t sirog 
BtcttLT. gftftpKDg^^iMfi-rsmi^jtlfi^T 1 

Mir%ffiisdi«. » 1 ©bb# sswm-sbbxx* 7 
Bi ©a«frSWlLfc3:/5 1 :/y*s B2©** 

h 7— > fcrt LT* 2 OgflliSfl*- 3£ 2 ©iMdXx 
B2®BBJ:y9Bfra#S*<!rtifcW$t M 

20)mmtm i HLTz>m2v>®.M.z : r-yyt. ^2©isk 

Xx7 7flMQJifc J: «BBHS«tc»-5^T» gflXx y 
^SasicJ: y Bfl£hfdHlftt*»24>ttBlcafflt- 
*«3©aHlXxv7£» »20BBEXx'y^fl!>fta»c 
J:*BliEeafcB-3i*7\ B2©gB©«SJB«*l«§ 
^SSWfXxy 7°is UtfiXxy 7°©fflS»c«fc tiMi 

rzti&ZTVzft. ftKxx'yyoaiatc^yi+a* 

nfc«*JBB©BB*MWr*IBtt#JBaTy ft 

ax77 ^©jaajc * y t«*hfca«#»®fl«=*cJ 

l^Tx £2©Ka*xy7VOte3IT*©SII©»8S*iSiJ8P 

[0 0 18] *«Wom2©i3»K<*(clBa*tiTl^ 
T'n^Wi, El ©BBtc»LT\ Sflnm«tm* 
3ffi-r5Sfn©£{I7.xy7 , <L. * 1 ©UBiilgfiEr* 
Mil ©ISIiE7.x y7i:. SflnRT©H**2SffllLfct 

aVTVV©****!***/*!***. mi ©SB 
frSSBr*BBXxy7fc. BKDBBfrSBBLfc 
3>xVJ'«, B2 0*y h 1 ?— **fl"LTS2©BB 
lcg«r £|g 2 ©SlIXxyTM:, B20SB<l:ySB 

iwflqi**nfe»^ m2©gs<!:i2iit-5m2©f8 

Blc*3t*T, SfiXx y ycMuncj: y Sfi* nfc» 
para«2©BBfcaBTMI3©aHlXTy7£» It 

2<»mizTyy<DW&iz&%mM.!i£%izm-3^T. m 

2©SB©«KIB«*IMt*-*B»Xxy7£» MX 
r y 7©B«c * y TO»*nfc«8U1WHc»^T» 3 

x y 7©w»c * y tHktfnfcWMBffoiBBSMBr 

*iB1f*Jffll7.x y y ^offiBlc J: y ftS 

*ftfc5Mte»©«K*^Ts Jg2©l2IIXxy7© 



«HT©BIE©aS*WWr * C i: fc<fc y % 3>fV7 
©SB£»£*J»f 5*J»Xr-> 7i:£^t> C &*mt 
if*, 

[0 0 19] *^(DSI2©tf$6SaagBx ^2<^tf$g 
fc<fctfSg2©IB&jSmcfB8g£ttTl^7°n 

?7&|c£(,v?l& HI ©BB*»JB1 ©*y h7— 7 
ftrtLTWiUfcaVxVVtf* B1 ®SBJ:yftfclf 
BtHk«±MC. Sg2©*y h7-y*fl-LTSfl2©g 

Bicasfl***. 

[0020] 

[5gE©*ffi©JB!ig] 01 14, *B«Mr»BLfc*y h 
7--7 i'XrACfllsEfflSSt^n y * 0?ft £. C © 
*y h9— ?->XxAU:33^TWu V-7.16\ /W4 
- 1 ZftLT. ->V7 2 - 1 tS&XFfV 7 ->"3 - 1 icfc 
«* tU $fcs 7' 'J y S> 3 - 1 b\ /KX4 — 2 L 
Ts -»*2-2a&«fctf7Uy5>3-2lC*tttfft, * 
6lC, 7'yyv i, 3-2A\ M7s4-3£rt-LTx -»7 
2-3, 2-4tC»«;*ft7V*. 

[0021] y-xi«\ □>x>y*ai*r*a73B 
BT'$5„ 3Vxvy*aj7rr**§^ y-zm. 3 

7rV7*MftLft», /tt4-17bM4-3£fl-L 
T» -»^2-17bB2-4tClB*r*. Bf^Hfc 

fi8*Lfc->V^tc^ta*ti5. CtUCfcy, 37iF7 

*^y»S?3-1. 3-21** SBLfc«**Httl73-r 

[0 0 2 2] -»^2- 1 71M2-4 (WT, -»7 2 

- 1 jbm 2 - 4 *B^icEai-r sieaifl 5 * t^B^» *k 
«) a* y-xi*y«ttft*ft/fcavxvy*B«r* 

BBBB7?*«. BHft3H=*a*LfcB&» »^2 

y-xi«feya*tifew««K»^T» §fiL/c 

□ 7x77*tl§t5. fcfc U 7 'J y -y 3 - 1 •¥> 3 - 
2fl«B#*-MB*, «rfcftB7W^bUTai73r*» 
> V 7 2 - 2 71jM 2 - 4 »B#3ft *7 U » ^ 

[0023] yyy-y'3-1, 3-2«, y-*ij:y 

lH73*hfc. WMbtfhT^iavyvyttBBU B 
m,Tc&. BlfflHMbLT->y^2-27SB2-4tcffl 

73f zmttz, *<orctb, yyy-y3-n*, y- 

K«ea!ftBB«*B»r*i:i:t.K» Hm73r*3Vx 

y y*H^w-yy^ 2 icSB^-ttfet^sy-^ 1 ice 
3.5, ^lt. yyy-y3-i«s y-zifretrer* 
t#fc6* y-xi icfttooT* nyxyy^gfi-rs-y 

V^2-271B2-40^tt*WHr*. 

-y3-2i*. 7yy-y3-i &BEU n«ics/v*2 

-3, 2-4<0BBS»*WBr*. 
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[0024] H2(*» mmnmammy 

[0 0 2 5] 3>7>7?U- \7l llis *x<71 2 
tfgSiJrti*^ SWISS 1 5flMM«c*-3^T» *r-f 
71 2(Cf3^JtlTt^3Vx> , y^4U 
3»caa^lf5c Bg#g|51 3«» 3Vr>yyi/-t1 1 
cfc'JA^SftfcllVxV'yfcBg^bU a«l/F (-TV 
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(54) INFORMATION PROCESSING APPARATUS AND METH0DAND RECORDING MEDIUM 

(57) Abstract: 

PROBLEM TO BE SOLVED: To provide an information processing apparatus 
that can limit the utilization of contents. 

SOLUTION: When receiving a contents transmission request from a sink 2- 
la source 1 conducts authentication processing. When the source 1 is 
successful in the authenticationthe source 1 transmits key information 
required to decode the encryption applied to the contents. The sink 2-1 
receives the key information and uses it to decode the encryption 
applied to the contents thereby receiving the contents. 



CLAIMS 



[Claim(s)] 

[Claim l]An information processor which transmits contents to other 

devices via a networkcomprising: 

An encoding means which enciphers said contents. 

An authentication means attested with a device besides the above when 



reception permission is required from a device besides the above. 
A transmitting means which transmits a release key of which a code of 
said contents is canceled to a device besides the above based on an 
authentication result of said authentication means. 

The 1st acquisition means that acquires identification information of a 
device besides the above based on an authentication result of said 
authentication means. 

The 1st counting means that calculates the number of receiving of said 
contents based on said identification information acquired by said 1st 
acquisition means. 

A memory measure which memorizes said identification information 
calculated by said 1st counting means. 

A control means which controls the number of receiving of said contents 
by controlling success or failure of attestation of said authentication 
means based on a value of said number of receiving calculated by said 
1st counting means. 

[Claim 2]The 2nd acquisition means that acquires a value of the number 
of receiving from a device besides the above based on an authentication 
result of said authentication meansThe information processor according 
to claim 1 having further the 2nd counting means that calculates the 
number of receiving of a device besides the above based on a value of 
said number of receiving acquired by said 2nd acquisition means. 
[Claim 3]When said release key transmitted to a device besides the above 
by said transmitting means is changedwhile eliminating said 
identification information memorized by said memory measureThe 
information processor according to claim 1 having further an information 
updating means which resets a value of said number of receiving 
calculated by said counting means. 

[Claim 4] An information processing method of an information processor 
which transmits contents to other devices via a network characterized by 
comprising the following. 

An encryption step which enciphers said contents. 

An authentication step attested with a device besides the above when 
reception permission is required from a device besides the above. 
A transmission step which transmits a release key of which a code of 
said contents is canceled to a device besides the above based on an 
authentication result in processing of said authentication step. 
An acquisition step which acquires identification information of a 
device besides the above based on an authentication result by processing 
of said authentication step. 



A counting step which calculates the number of receiving of said 
contents based on said identification information acquired by processing 
of said acquisition step. 

A storage control step which controls memory of said identification 
information calculated by processing of said counting step. 
A control step which controls the number of receiving of said contents 
based on a value of said number of receiving calculated by processing of 
said counting step by controlling success or failure of attestation by 
processing of said authentication step. 

[Claim 5]A program characterized by comprising the following for 
information processors which transmits contents to other devices via a 
network. 

An encryption step which enciphers said contents. 

An authentication step attested with a device besides the above when 
reception permission is required from a device besides the above. 
A transmission step which transmits a release key of which a code of 
said contents is canceled to a device besides the above based on an 
authentication result by processing of said authentication step. 
An acquisition step which acquires identification information of a 
device besides the above based on an authentication result in processing 
of said authentication step. 

A counting step which calculates the number of receiving of said 
contents based on said identification information acquired by processing 
of said acquisition step. 

A storage control step which controls memory of said identification 
information calculated by processing of said counting step. 
A control step which controls the number of receiving of said contents 
based on a value of said number of receiving calculated by processing of 
said counting step by controlling success or failure of attestation by 
processing of said authentication step. 

[Claim 6]An information processor which receives contents from the 1st 
device via the 1st networkcomprising: 

The 1st transmitting means that transmits a demand of reception 
permission to said 1st device. 

The 1st authentication means attested with said 1st device. 
A reception means which receives a release key of which a code of said 
contents is canceled from said 1st device when a demand of said 
reception permission is transmitted. 

The 2nd transmitting means that transmits said contents which received 



from said 1st device to the 2nd device via the 2nd network. 

The 2nd authentication means attested with said 2nd device when 

reception permission is required from said 2nd device. 

The 3rd transmitting means that transmits said release key received by 

said reception means to said 2nd device based on an authentication 

result of said 2nd authentication means. 

The 1st acquisition means that acquires identification information of 
said 2nd device based on an authentication result of said 2nd 
authentication meansThe 1st counting means that calculates the number of 
receiving of said contents based on said identification information 
acquired by said 1st acquisition meansA memory measure which memorizes 
said identification information calculated by said 1st counting meansand 
a control means which controls the number of receiving of said contents 
by controlling success or failure of attestation of said 2nd 
authentication means based on a value of said number of receiving 
calculated by said 1st counting means. 

[Claim 7]The information processor according to claim 6 having further a 
decoding means which decodes said contentsand an encoding means which 
enciphers said contents decoded by said decoding means. 
[Claim 8]The 4th transmitting means that transmits a value of said 
number of receiving calculated by said 1st counting means to said 1st 
device based on an authentication result of said 1st authentication 
meansThe 2nd acquisition means that acquires a value of the number of 
receiving from said 2nd device based on an authentication result of said 
2nd authentication meansThe information processor according to claim 6 
having further the 2nd counting means that calculates the number of 
receiving of said 2nd device based on a value of said number of 
receiving acquired by said 2nd acquisition means. 

[Claim 9]When said release key transmitted to said 2nd device by said 
3rd transmitting means is changedwhile eliminating said identification 
information memorized by said memory measureThe information processor 
according to claim 6 having further an information updating means which 
resets a value of said number of receiving calculated by said 1st 
counting means. 

[Claim 10]An information processing method of an information processor 
which receives contents from the 1st device via the 1st network 
characterized by comprising the following. 

The 1st transmission step that transmits a demand of reception 
permission to said 1st device. 

The 1st authentication step attested with said 1st device. 



A receiving step which receives a release key of which a code of said 
contents is canceled from said 1st device when a demand of said 
reception permission is transmitted. 

The 2nd transmission step that transmits said contents which received 
from said 1st device to the 2nd device via the 2nd network. 
The 2nd authentication step attested with said 2nd device when reception 
permission is required from said 2nd device. 

The 3rd transmission step that transmits said release key received by 
processing of said receiving step to said 2nd device based on an 
authentication result by processing of said 2nd authentication step. 
An acquisition step which acquires identification information of said 
2nd device based on an authentication result by processing of said 2nd 
authentication stepA counting step which calculates the number of 
receiving of said contents based on said identification information 
acquired by processing of said acquisition stepA storage control step 
which controls memory of said identification information calculated by 
processing of said counting stepA control step which controls the number 
of receiving of said contents based on a value of said number of 
receiving calculated by processing of said counting step by controlling 
success or failure of attestation by processing of said 2nd 
authentication step. 

[Claim 11] A program characterized by comprising the following for 
information processors which receives contents from the 1st device via 
the 1st network. 

The 1st transmission step that transmits a demand of reception 
permission to said 1st device. 

The 1st authentication step attested with said 1st device. 
A receiving step which receives a release key of which a code of said 
contents is canceled from said 1st device when a demand of said 
reception permission is transmitted. 

The 2nd transmission step that transmits said contents which received 
from said 1st device to the 2nd device via the 2nd network. 
The 2nd authentication step attested with said 2nd device when reception 
permission is required from said 2nd device. 

The 3rd transmission step that transmits said release key received by 
processing of said receiving step to said 2nd device based on an 
authentication result by processing of said 2nd authentication step. 
An acquisition step which acquires identification information of said 
2nd device based on an authentication result by processing of said 2nd 
authentication stepA counting step which calculates the number of 



receiving of said contents based on said identification information 
acquired by processing of said acquisition stepA storage control step 
which controls memory of said identification information calculated by 
processing of said counting stepA control step which controls the number 
of receiving of said contents based on a value of said number of 
receiving calculated by processing of said counting step by controlling 
success or failure of attestation by processing of said 2nd 
authentication step. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] Especially this invention relates to the 
information processor and method of having enabled it to restrict use of 
contentsand a recording medium about an information processora methodand 
a recording medium. 
[0002] 

[Description of the Prior Art] In recent yearsthe network system 
represented by the Internet has spread. Therebythe user can disseminate 
information via the Internet or can receive information. 
[0003] 

[Problem(s) to be Solved by the Invention]By the waythe user who wishes 
viewing and listening of workssuch as a movie and musiccan receive the 
works by paying the remuneration to it. 

[0004] However there was a possibility that it may be unjustly viewed and 
listened to workssuch as a movie and musicto many users who have not 
paid the remuneration not only to the owner but worksthrough 
networkssuch as the Internet. 

[0005] When the act to which it is unjustly viewed and listened through a 

network came to be performed indef initelythere was a possibility of 

checking contents creation and circulation business. 

[0006]This invention is made in view of such a situationand it enables 

it to prevent contents from being unjustly used via a network. 

[0007] 

[Means for Solving the Problem]This invention is characterized by the 
1st information processor comprising the following. 
An encoding means which enciphers contents. 

An authentication means attested with other devices when reception 



permission is required from other devices. 

A transmitting means which transmits a release key of which a code of 
contents is canceled to other devices based on an authentication result 
of an authentication means. 

The 1st acquisition means that acquires identification information of 
other devices based on an authentication result of an authentication 
meansThe 1st counting means that calculates the number of receiving of 
contents based on identification information acquired by the 1st 
acquisition meansA memory measure which memorizes identification 
information calculated by the 1st counting meansand a control means 
which controls the number of receiving of contents by controlling 
success or failure of attestation of an authentication means based on a 
value of the number of receiving calculated by the 1st counting means. 

[0008]The 1st information processor of this invention can establish 
further the 2nd acquisition means that acquires a value of the number of 
receiving from other devicesand the 2nd counting means that calculates 
the number of receiving of other devices based on a value of the number 
of receiving acquired by the 2nd acquisition means based on an 
authentication result of an authentication means. 
[0009] It can establish further an information updating means which 
resets a value of the number of receiving calculated by a counting means 
while eliminating identification information memorized by a memory 
measurewhen the 1st information processor of this invention is changed 
[ a release key transmitted to other devices by transmitting means ]. 
[0010]This invention is characterized by the 1st information processing 
method comprising the following. 
An encryption step which enciphers contents. 

An authentication step attested with other devices when reception 
permission is required from other devices. 

A transmission step which transmits a release key of which a code of 
contents is canceled to other devices based on an authentication result 
in processing of an authentication step. 

An acquisition step which acquires identification information of other 
devices based on an authentication result by processing of an 
authentication stepA counting step which calculates the number of 
receiving of contents based on identification information acquired by 
processing of an acquisition stepA control step which controls the 
number of receiving of said contents by controlling success or failure 
of attestation by processing of an authentication step based on a value 
of the number of receiving calculated by processing of a storage control 



step which controls memory of identification information calculated by 
processing of a counting stepand a counting step. 

[0011]This invention is characterized by a program currently recorded on 
the 1st recording medium comprising the following. 
An encryption step which enciphers contents. 

An authentication step attested with other devices when reception 
permission is required from other devices. 

A transmission step which transmits a release key of which a code of 
contents is canceled to other devices based on an authentication result 
in processing of an authentication step. 

An acquisition step which acquires identification information of other 
devices based on an authentication result by processing of an 
authentication stepA counting step which calculates the number of 
receiving of contents based on identification information acquired by 
processing of an acquisition stepA control step which controls the 
number of receiving of said contents by controlling success or failure 
of attestation by processing of an authentication step based on a value 
of the number of receiving calculated by processing of a storage control 
step which controls memory of identification information calculated by 
processing of a counting stepand a counting step. 

[0012] In the 1st information processor of this inventionthe 1st 
information processing methodand a program currently recorded on the 1st 
recording mediumUnless the number of receiving exceeds an acceptable 
value even if it permits the reception when contents are enciphered and 
reception permission is required from other devicesit is attested with 
other devices and a release key of which a code of contents is canceled 
is transmitted to other devices based on the authentication result. 
[0013]This invention is characterized by the 2nd information processor 
comprising the following. 

The 1st transmitting means that transmits a demand of reception 
permission to the 1st device. 

The 1st authentication means attested with the 1st device. 
A reception means which receives a release key of which a code of 
contents is canceled from the 1st device when a demand of reception 
permission is transmitted. 

The 2nd transmitting means that transmits contents which received from 
the 1st device to the 2nd device via the 2nd networkThe 2nd 
authentication means attested with the 2nd device when reception 
permission is required from the 2nd deviceThe 3rd transmitting means 



that transmits a release key received by a reception means to the 2nd 
device based on an authentication result of the 2nd authentication 
meansThe 1st acquisition means that acquires identification information 
of the 2nd device based on an authentication result of the 2nd 
authentication meansThe 1st counting means that calculates the number of 
receiving of contents based on identification information acquired by 
the 1st acquisition meansA memory measure which memorizes identification 
information calculated by the 1st counting meansand a control means 
which controls the number of receiving of contents by controlling 
success or failure of attestation of the 2nd authentication means based 
on a value of the number of receiving calculated by the 1st counting 
means. 

[0014]The 2nd information processor of this invention can establish 
further a decoding means which decodes contentsand an encoding means 
which enciphers contents decoded by decoding means. 

[0015]The 4th transmitting means that transmits a value of the number of 
receiving by which the 2nd information processor of this invention was 
calculated by the 1st counting means based on an authentication result 
of the 1st authentication means to the 1st deviceBased on an 
authentication result of the 2nd authentication meansthe 2nd acquisition 
means that acquires a value of the number of receiving from the 2nd 
deviceand the 2nd counting means that calculates the number of receiving 
of the 2nd device based on a value of the number of receiving acquired 
by the 2nd acquisition means can be established further. 
[0016] When the 2nd information processor of this invention is changed 
[ a release key transmitted to the 2nd device by the 3rd transmitting 
means ]while eliminating identification information memorized by a 
memory measureAn information updating means which resets a value of the 
number of receiving calculated by the 1st counting means can be 
established further. 

[0017]This invention is characterized by the 2nd information processing 
method comprising the following. 

The 1st transmission step that transmits a demand of reception 
permission to the 1st device. 

The 1st authentication step attested with the 1st device. 
A receiving step which receives a release key of which a code of 
contents is canceled from the 1st device when a demand of reception 
permission is transmitted. 

The 2nd transmission step that transmits contents which received from 
the 1st device to the 2nd device via the 2nd networkThe 2nd 



authentication step attested with the 2nd device when reception 
permission is required from the 2nd deviceThe 3rd transmission step that 
transmits a release key received by processing of a receiving step to 
the 2nd device based on an authentication result by processing of the 
2nd authentication stepAn acquisition step which acquires identification 
information of the 2nd device based on an authentication result by 
processing of the 2nd authentication stepA counting step which 
calculates the number of receiving of contents based on identification 
information acquired by processing of an acquisition stepA control step 
which controls the number of receiving of contents based on a value of 
the number of receiving calculated by processing of a storage control 
step which controls memory of identification information calculated by 
processing of a counting stepand a counting step by controlling success 
or failure of attestation by processing of the 2nd authentication step. 

[0018]This invention is characterized by a program currently recorded on 
the 2nd recording medium comprising the following. 
The 1st transmission step that transmits a demand of reception 
permission to the 1st device. 

The 1st authentication step attested with the 1st device. 
A receiving step which receives a release key of which a code of 
contents is canceled from the 1st device when a demand of reception 
permission is transmitted. 

The 2nd transmission step that transmits contents which received from 
the 1st device to the 2nd device via the 2nd networkThe 2nd 
authentication step attested with the 2nd device when reception 
permission is required from the 2nd deviceThe 3rd transmission step that 
transmits a release key received by processing of a receiving step to 
the 2nd device based on an authentication result by processing of the 
2nd authentication stepAn acquisition step which acquires identification 
information of the 2nd device based on an authentication result by 
processing of the 2nd authentication stepA counting step which 
calculates the number of receiving of contents based on identification 
information acquired by processing of an acquisition stepA control step 
which controls the number of receiving of contents based on a value of 
the number of receiving calculated by processing of a storage control 
step which controls memory of identification information calculated by 
processing of a counting stepand a counting step by controlling success 
or failure of attestation by processing of the 2nd authentication step. 

[0019] In the 2nd information processor of this invent ionthe 2nd 



information processing methodand a program currently recorded on the 2nd 
recording mediumThe number of permission obtained from the 1st device is 
transmitted to contents which received via the 1st network from the 1st 
device by maximum via the 2nd network at the 2nd device. 
[0020] 

[Embodiment of the Invention] Drawing 1 is a block diagram showing the 
example of composition of the network system which applied this 
invention. In this network systemthe sauce 1 via the bus 4-lIt is 
connected to the sink 2-1 and the bridge 3-land the bridge 3-1 is 
connected to the sink 2-2 and the bridge 3-2 via the bus 4~2and the 
bridge 3-2 is further connected to sink 2-32-4 via the bus 4-3. 
[0021]The sauce 1 is an output unit which outputs contents. When 
outputting contentsafter the sauce 1 enciphers contentsit is outputted 
to the sink 2-1 thru/or 2-4 via the bus 4-1 thru/or 4-3. Key information 
required for decoding of the enciphered contents is passed only to the 
sink which succeeded in authenticating processing. Therebythe number of 
a sink which receives contents is restricted. Since bridge 3-13-2 
mentioned later only carries out the re output of the received signalit 
is excepted from the object of a number count. 

[0022] The sink 2-1 thru/or 2-4 (hereafterwhen the sink 2-1 thru/or 2-4 
do not need to be distinguished separatelyit is only indicated as the 
sink 2.) in other devices — the same — carrying out — it is a 
receiving set which receives the contents supplied from the sauce 1. 
When it succeeds in authenticating processingthe sink 2 decodes the 
contents which received based on the key information passed from the 
sauce 1. Howeverthe bridge 3~1 and 3-2 once solve a codeand when 
enciphering and outputting with a new keythe sink 2-2 thru/or 2-4 decode 
the contents which received based on the key information passed from the 
bridge connected directly. 

[0023] After bridge 3-13-2 receives and decodes the contents which were 
outputted from the sauce 1 and which are encipheredit shall encipher 
again and it shall be outputted to the sink 2-2 thru/or 2-4. 
Thereforethe bridge 3-1 tells the sinks 2 he wants how many sets of to 
receive the contents which carry out a re output to the sauce 1 while it 
performs the sauce 1 and authenticating processing and acquires key 
information required for decoding of the enciphered contents. And the 
bridge 3-1 will restrict the sink 2-2 thru/or the number of 2-4 which 
receives contents instead of the sauce lif permission is obtained from 
the sauce 1. The bridge 3-2 is attested with the bridge 3-land restricts 
the number of receiving of sink 2-32-4 similarly. 
[0024] Drawing 2 is a block diagram showing the detailed example of 



composition of the sauce 1. 

[0025] If equipped with the media 12the content player 11 will reproduce 
the contents currently recorded on the media 12 based on control of the 
control section 15and will output them to the cryptopart 13. The 
cryptopart 13 enciphers the contents inputted from the content player 
Hand outputs them outside via communication I/F(interface) 14. The 
sauce which receives broadcast contents and has a tuner to output 
instead of the content player 11 and the media 12 is also considered. 
[0026]The control section 15 controls the content player 12the 
cryptopart 13communication I/F14and the storage parts store 16. The 
control section 15 makes the storage parts store 16 memorize again the 
contents reproduced with the content player 11 if needed. 
[0027] Drawing 3 is a block diagram showing the detailed example of 
composition of the sink 2. 

[0028]The control section 24 controls a picture and the voice output 
part 21the decoding part 22communication I/F23and the storage parts 
store 25. The control section 24 sends the contents which have been 
transmitted via communication I/F23 and which are enciphered to the 
decoding part 22 again. 

[0029] The decoding part 22 acquires the key information transmitted from 
the sauce 1 via communication I/F23. The decoding part 22 decodes 
contents again based on the acquired key information. An image and the 
voice output part 21 output the contents decoded by the decoding part 22. 
[0030] Drawing 4 is a block diagram showing the detailed example of 
composition of the bridge 3. 

[003l]The control section 35 controls communication I/F31the decoding 
part 32the cryptopart 33communication I/F34and the storage parts store 
36. The control section 35 sends the contents which have been 
transmitted via communication I/F31 and which are enciphered to the 
decoding part 32 again. 

[0032]The decoding part 32 decodes receiving contents based on the 
acquired key information while acquiring the key information transmitted 
from the sauce 1 via communication I/F31. 

[0033] The cryptopart 33 enciphers the contents decoded by the decoding 
part 32and outputs them outside via communication I/F34. 
[0034] Digital Certificate for each apparatus by which a lock management 
organization publishes the sauce lthe sink 2and the bridge 3 for 
attestation using public-key-encryption art. It shall have a secret key 
for each apparatus (hereafter indicated to be Certificate) and a public 
key of a lock management organization. The electronic signature by the 
lock management organization to the secret key for each apparatusthe 



corresponding public key for each apparatuspeculiar ID of that 
apparatusand these two data shall be included in this Certificate. 
[0035] Drawing 5 is a figure explaining authenticating processing in case 
direct continuation of the sauce 1 and the sink 2-1 ( drawing 1 ) is 
carried out. 

[0036]Firstthe sink 1 transmits its Certificate to the sauce 2-1. The 
control section 15 of the sink 1 reads Certificate from the storage 
parts store 16andspecif icallytransmits to the sauce 2-1 as a 
communication command via communication I/F14 ( drawing 5 **). 
[0037]The sauce 2 will judge whether it is a thing with that just dataif 
this communication command is received. It is investigated whether it is 
that the data in Certificate which the control section 24 of the sauce 
2-1 specifically received via communication I/F23 using the public key 
of a lock management organization memorized by the storage parts store 
25and the electronic signature of the lock management organization which 
accompanies them correspond. That isthe control section 24 judges the 
justification of received data by performing DSA (Digital Signature 
Algorithm) Verify data processing of public key encryption. And when a 
decision result is justauthenticating processing is continuedand when 
that is not rightit ends authenticating processing. 
[0038]When continuing processingthe control section 15 of the sauce 1 
investigates whether it is registered to the attested ID list (it is 
hereafter indicated as an ID list) which ID of the partner in 
Certificate holds to the storage parts store 16and when registeredit 
substitutes zero for the variable CntUp. 

[0039] When ID of the partner in Certificate is unregisteredon the other 
handto an ID list the control section 15 of the sauce IThe number of the 
sinks 2 which permitted reception (it is hereafter indicated as the 
variable SinkCnt) is compared with the upper limit number (it is 
hereafter indicated as the variable MaxSink) which can permit 
receptionand one will be substituted for the variable CntUp if the 
variable SinkCnt is smaller. 

[0040] In SinkCnt=MaxSinkauthenticating processing is ended. The variable 
MaxSink may not be a variable (that isit may be a constant). 
[0041]And with a pseudorandom-numbers generation algorithmthe control 
section 15 of the sauce 1 generates pseudorandom-numbers 
Random_challengeand transmits to the sink 2 as a communication command 
( drawing 5 **) . 

[0042]The control section 24 of the sink 2-1 will calculate an 
electronic signature by performing DSASign data processing of public key 
encryption to that value using its own secret key currently held at the 



storage parts store 25if this communication command is received. The 
control section 24 of the sink 2-1 transmits the calculated electronic 
signature to the sauce 1 as a communication command (Response data) 
( drawing 5 **) . 

[0043] If this communication command is receivedthe control section 15 of 
the sauce 1 will perform whether pseudorandom-numbers Random_challenge 
which he sentand this electronic signature correspondand DSAVerify data 
processing mentioned aboveand will judge the justification of data. 
Howeverthe public key of the partner in Certificate received from the 
partner is used instead of the public key of a previous lock management 
organization here. And when a decision result is justauthenticating 
processing is continuedand authenticating processing is ended when that 
is not right. 

[0044]When continuing processingthe control section 15 of the sauce 1 
transmits key information required to solve the code enciphered contents 
as a communication command to the sink 2-1 ( drawing 5 **)and only the 
value of the variable CntUp increases the value of the variable SinkCnt. 
And the control section 15 of the sauce 1 investigates whether it is 
registered to the attested ID list which ID of the partner in 
Certificate holds to the storage parts store 16and when registeredit 
substitutes zero for the variable CntUp. On the other handwhen ID of the 
partner in Certificate is unregisteredone will be substituted for the 
variable CntUp if the variable SinkCnt is smaller in the variable 
SinkCnt and the variable MaxSink as compared with an ID list. 
[0045]The sink 2-1 can receive contents by receiving key information and 
solving the code contents were enciphered using it. 

[0046]Like the sauce 1 and the sink 2-2 which are shown in drawing l when 
the contents outputted from the sauce 1 are received by the sink 2-2 
after they go via the bridge 3-lthe sink 2-2 and the bridge 3-1 perform 
authenticating processing as shown in drawing 5 too. That islike the 
sauce lthe sink 2~3or the sauce 1 and the sink 2-4even when contents are 
transmitted via two or more sets of bridgesthe sink 1 and the last 
bridge 3-2 (bridge connected sink 2-32-4 and directly) perform same 
authenticating processing. 

[0047]The process flow of the sink 2 in the above authenticating 
processing is shown in drawing 6 and the process flow of the sauce 1 is 
shown in drawing 7 respectively. 

[0048]The authenticating processing of the sink 1 is completely the same 
as the case of the sauce 2even if a partner is the bridge 3. The 
authenticating processing of the bridge 3 differs in the processing 
shown in Step S15 of drawing 7 from the case of the sauce 2. In 



SinkCnt=MaxSinkspecif ically the bridge 3In order to enlarge the value of 
the variable MaxSinkauthenticating processing which requires reception 
permission of the sauce 1 or the bridge 3 (if it is the bridge 3-1 in 
the case of the example of drawing 1 and is the sauce 1 and the bridge 
3-2 bridge 3-1) which is the dispatch origin of the contents which he 
has received (input) is performed. The addition of one or more sets of 
the number of receiving is required in this case. When this 
authenticating processing is successfulthe processing after Step S16 of 
drawing 7 is continued. 

[0049] Drawing 8 is a figure explaining authenticating processing in case 
direct continuation of the sauce 1 and the bridge 3-1 ( drawing 1 ) is 
carried out. 

[0050]Firstthe control section 35 of the bridge 3-1 transmits its 
Certif icatethe variable RelCntand the variable AbsCnt to the sauce 1 
( drawing 8 **) . Herethe variable RelCnt expresses the number of the 
reception permission which wants to newly obtain the bridge 3~land the 
variable AbsCnt expresses the number of the sum total of the already 
obtained number of permissionand the number which wants to obtain 
permission this time. 

[0051] If this is receivedthe control section 15 of the sauce 1 will be 
judged when Certificate performs DSA Verify data processing which 
mentioned above whether it was a just thing. And authenticating 
processing is ended when a decision result is not just. 
[0052] When continuing processingthe control section 15 of the sauce 1 
investigates whether ID of the partner in Certificate is registered to 
its own ID listand when registeredit substitutes the variable RelCnt for 
the variable CntUp. 

[0053] On the other handwhen ID of the partner in Certificate is 
unregisteredthe control section 15 of the sauce 1 substitutes the 
variable AbsCnt for an ID list at the variable CntUp. And the value 
which added the variable CntUp to the variable SinkCnt judges whether it 
is smaller than the variable MaxSinkand the control section 15 of the 
sauce 1 ends authenticating processingwhen equal. 

[0054]And the control section 15 of the sauce 1 generates pseudorandom- 
numbers Random_challengeand transmits to the bridge 3-1 as a 
communication command ( drawing 8 **). 

[0055]The control section 35 of the bridge 3-1 will calculate an 
electronic signature by performing DSA Sign data processing mentioned 
above to the variable RelCnt and the variable AbsCnt which transmit [ a 
value and ] using its own secret key currently held at the storage parts 
store 36if this communication command is received. [ that ] The control 



section 35 of the bridge 3-1 transmits the calculated electronic 
signature to the sauce 1 as a communication command (Response data) 
( drawing 8 **) . 

[0056] Pseudorandom-numbers Random_challenge which he sent when the 
control section 15 of the sauce 1 received this communication 
commandWhether this electronic signature's supporting received the 
variable RelCnt and the variable AbsCnt and DSA Verify data processing 
mentioned above are performedand the justification of data is judged. 
Howeverthe public key of the partner in Certificate received from the 
partner is used instead of the public key of a previous lock management 
organization here. And authenticating processing is ended when a 
decision result is not just. 

[0057]When continuing processingthe control section 15 of the sauce lit 
addswhen a partner's ID is unregistered to an ID list after it transmits 
key information required to solve the code enciphered contents as a 
communication command to the bridge 3-1 ( drawing 8 **) and only the 
value of the variable CntUp makes the value of the variable SinkCnt 
increase. 

[0058]The bridge 3-1 receives key informationand after it solves the 
code contents were enciphered using itit enciphers again and it outputs 
contents. And the control section 35 of the bridge 3-1 increases the 
value of the variable MaxSink only the value of the variable RelCnt. 
[0059]The process flow of the bridge 3 in the above authenticating 
processing is shown in drawing 9 and the process flow of the sauce 1 is 
shown in drawing lO respectively. 

[0060] Like the sauce 1 and the sink 2-3 which are shown in drawing l or 
the sauce 1 and the sink 2~4After going via two or more sets of bridge 
3-13-2the contents outputted from the sauce lWhen received by sink 2-32- 
4the bridge 3~1 (it is hereafter indicated as Tx bridge) which outputs 
contentsand the bridge 3-2 (it is hereafter indicated as Rx bridge) 
which receives it perform authenticating processing as shown in drawing 
8_too. 

[006l]The authenticating processing of Rx bridge is completely the same 
as the case where a partner is the sauce 1. 

[0062]The authenticating processing of Tx bridge differs in the 
processing shown in Step S46 of drawing 10 from the case of the sauce 1. 
In SinkCnt+CntUp>MaxSinkspecif ically Tx bridgeln order to enlarge the 
value of the variable MaxSinkauthenticating processing which requires 
reception permission of the sauce 1 or the bridge 3 which is the 
dispatch origin of the contents which he has inputted is performed (in . 
the case of the example of drawing l the bridge 3-1 requires attestation 



of the sauce l). The addition of the above number of receiving is 
required in this case (SinkCnt+CntUp) (-MaxSink). When this 
authenticating processing is successfulthe processing after Step S50 of 
drawing 10 is continued. 

[0063] The case where the variable RelCnt and the variable AbsCnt are 
transmitted apart from Certificate as other examples of processing can 
be considered. For examplethere is also a method of transmitting with 
Response shown in drawing 8 ** or the method of completely transmitting 
with another communication command. 

[0064] In Step S15 of drawing 7 or Step S46 of drawing lO when bridge 3-13- 

2 attests with the sauce 1 or the bridge 3 newly connectedit is not 
based on the result but subsequent processing also has a method which is 
not continued. That isnew attestation can be regarded as the thing for 
making successful the attestation on and after next time. 

[0065] It stops further again that the sink 2 undergoes its outputand 
when information required to solve a code is lostas for the sauce 1 or 
the bridge 3only the part of the sink 2 can reduce the variable SinkCnt. 
For exampleif the key information of the code the sauce 1 and the bridge 

3 encipher contents is changedthe sink 2 can set its own variable 
SinkCnt to zero. 

[0066]As mentioned abovesince the sauce 1 or the bridge 3 restricted the 
number of receiving of the sink 2 which can undergo an outputan effect 
as taken below is acquired. 

(1) The right holder about contents can prevent unjust viewing and 
listening and record of contents. 

(2) Even when the re output of the signal is carried out using a 
bridgesauce can restrict the number also including the sink which is in 
the point of a bridge. 

(3) By performing restriction of the number using ID peculiar to 
apparatuseven if the same sink attests how many timesdon' t increase the 
number accidentally. 

(4) When a bridge requires reception permission of sauce or another 
bridgean increase or decrement of the number of receivingand the number 
of the reception sum total by telling about sauce and another bridgeWhen 
having attested with the bridgealso in any when not having attestedthe 
variable SinkCnt can be easily changed into a right value. 

(5) By using public-key-encryption artdevice-dependent ID and the number 
of a demand can be safely passed to other apparatusand number management 
of the right can be performed. 

[0067] Although a series of processings mentioned above can also be 
performed by hardwarethey can also be performed by software. The 



computer by which the program which constitutes the software is included 
in hardware for exclusive use when performing a series of processings by 
softwareOr it is installed in the personal computer etc. which can 
perform various kinds of functionsfor exampleare general-purposeetc. 
from a recording medium by installing various kinds of programs. 
[0068]. Apart from a computerthis recording medium is distributed in 
order to provide a user with a program. The magnetic disk with which the 
program is recorded (a floppy disk is included) an optical disc (CD-ROM 
(Compact Disk-Read Only Memory).) . DVD (Digital Versatile Disk) is 
included. It is not only constituted by the package media which consist 
of a magneto-optical disc (MD (Mini-Disk) is included) or semiconductor 
memorybutlt comprises ROMa hard disketc. with which a user is provided 
in the state where it was beforehand included in the computer and in 
which the program is recorded. 

[0069] In this specif icationeven if the processing serially performed in 
accordance with an order that the step which describes the program 
recorded on a recording medium was indicated is not of course 
necessarily processed seriallyit also includes a parallel target or the 
processing performed individually. ^ 

[0070] In this specif icationa system expresses the whole device 

constituted by two or more devices. 

[0071] 

[Effect of the Invention]As mentioned aboveaccording to the 1st 
information processor of this inventionthe 1st information processing 
methodand the program currently recorded on the 1st recording medium. 
Unless the number of receiving exceeds an acceptable value even if it 
permits the reception when contents are enciphered and reception 
permission is required from other deviceslt attests with other 
devicesand since the release key of which the code of contents is 
canceled was transmitted to other devices based on the authentication 
resultit becomes possible to restrict use of contents. 
[0072] According to the 2nd information processor of this inventionthe 
2nd information processing methodand the program currently recorded on 
the 2nd recording medium. Since the number of permission which obtained 
the contents which received via the 1st network from the 1st device from 
the 1st device was transmitted to the 2nd device via the 2nd network at 
the maximumit becomes possible to restrict the receiving set of output 
contents based on the obtained number of permission. 
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[Brief Description of the Drawings] 

[Drawing l] It is a block diagram showing the example of composition of 
the network system which applied this invention. 
[Drawing 2] It is a block diagram showing the detailed example of 
composition of the sauce of drawing 1. 

[Drawing 3] It is a block diagram showing the detailed example of 
composition of the sink of drawing 1. 

[Drawing 4] It is a block diagram showing the detailed example of 
composition of the bridge of drawing 1 . 

[Drawing 5] It is a figure explaining the authenticating processing of 
sauce or a bridgeand a sink. 

[Drawing 6] It is a flow chart explaining the authenticating processing 
to the sauce or the bridge of a sink. 

[Drawing 7] It is a flow chart explaining the authenticating processing 
to sauce or the sauce of a bridge. 

[Drawing 8] It is a figure explaining the authenticating processing of Rx 
bridge of sauce or Tx bridge. 

[Drawing 9] It is a flow chart explaining the authenticating processing 
to the sauce of Rx bridgeor Tx bridge. 

[Drawing 10] It is a flow chart explaining the authenticating processing 
to Rx bridge of sauce or Tx bridge. 
[Description of Notations] 

1 Sauce2-1 to 2-4 A sink3-13~2 A bridge and 11 A content playerl2 Media 
and 13 A cryptopart and 14. Communication I/F and 15 [ A decoding part 
and 23 / Communication I/F24 control sectionsand 25 / A storage parts 
store and 31 / Communication I/F and 32 / A decoding part and 33 / A 
cryptopart and 34 / Communication I/F and 35 / A control section and 36 
storage parts stores ] A control section and 16 A storage parts store 
and 21 A picture and a voice output partand 22 



